← Back
(Updated) Restrict new file creation in Office desktop apps to Cloud Locations
MC1137593 · build prod-20251231-200323
Category
stayInformed
Severity
normal
Major change
False
Last modified
2025-12-08 17:28:50
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Microsoft 365 apps
Tags
Updated message, New feature
Master tags
Security
Roadmap IDs

One-line summary

Admins can now enforce cloud-only file creation in Word, Excel, and PowerPoint for Windows via Group Policy, restricting 'Save As' to OneDrive, SharePoint, or third-party clouds.

Similar updates

More like this
MC999442 Microsoft Purview | Data Lifecycle Management: Retention based on “last accessed” for OneDrive and SharePoint files
Microsoft Purview | Data Lifecycle Management: Retention based on “last accessed” for OneDrive and SharePoint files Admins can soon apply retention policies in OneDrive and SharePoint based on file last accessed date, improving Copilot response quality; rollout starts late May 2026. ...Purview | Data Lifecycle Management: Admins will be able to.
MC1184413 Microsoft 365 Copilot for Android: Preview and chat with Word, Excel, and PowerPoint files in the Copilot app
Microsoft 365 Copilot for Android: Preview and chat with Word, Excel, and PowerPoint files in the Copilot app Microsoft 365 Copilot app for Android adds file preview and Copilot Chat for Word, Excel, and PowerPoint; editing and advanced file actions now require standalone Office apps. [Introduction] We're introducing a new preview experience .
MC1208688 Microsoft Office for the web: Apply sensitivity labels with user-defined permissions
Microsoft Office for the web: Apply sensitivity labels with user-defined permissions Office for the web now lets users apply sensitivity labels with custom permissions in Word, Excel, and PowerPoint, matching the experience in desktop apps and respecting existing admin policies. Office for the web in Microsoft 365 now supports applying .
MC981462 (Updated) Multiple account access to Copilot in Microsoft 365 desktop and mobile apps
(Updated) Multiple account access to Copilot in Microsoft 365 desktop and mobile apps Multiple account access to Copilot in Microsoft 365 desktop and mobile apps will roll out starting March 2025, with Cloud Policy controls available by late January 2025. Updated October 1, 2025: Today we announced multiple updates to our Microsoft 365.
MC1074098 (Updated) Microsoft OneDrive: Export files as PDF
(Updated) Microsoft OneDrive: Export files as PDF The new Export as PDF feature in OneDrive lets users quickly create PDFs from Word, Excel, and PowerPoint files, respecting IRM and sensitivity labels; rollout is delayed with no new date set. Updated July 24, 2025: After further review, we are not able to roll this out at this time. We apologize.
MC1183292 Microsoft Purview | Data Lifecycle Management - Introducing secure priority cleanup workflows for OneDrive/SharePoint
Microsoft Purview | Data Lifecycle Management - Introducing secure priority cleanup workflows for OneDrive/SharePoint Admins can now override retention policies to delete OneDrive and SharePoint content early using new Priority Cleanup policies in Microsoft Purview Data Lifecycle Management. [Introduction] We're introducing a new capability in .

Details

Summary
Starting late August 2025, IT admins can restrict new Word, Excel, and PowerPoint files to be created only in Cloud Locations via a Group Policy. This enhances security and compliance by ensuring files are saved in OneDrive, SharePoint, or third-party Clouds, with rollout completing by December 2025.

Body (from Message Center)

Updated December 8, 2025: We have updated the timeline due to a pending release for the Monthly Enterprise Channel. Thank you for your patience. 

Introduction

IT Administrators will be able to set up Word, Excel, and PowerPoint Windows applications to limit the creation of new files to only Cloud Locations (OneDrive, SharePoint, or third-party Clouds).

This configuration is called enablecloudonlysaveasmode is available only to IT Administrators and deployed using Group Policies. This policy is available now in the Administrative Template files for Microsoft Office (version 5516.1000 or newer).

For the policy to apply, users should be using a Windows version of Word, Excel and PowerPoints Version 2506 (Build 19029.20000) or newer.

This new Policy is part of a new set of tools for IT Administrators to move their organizations towards higher Cloud usage and Increase security and compliance: Files in the Cloud are automatically protected by your company’s security rules and labeling, so you don’t have to take extra steps to keep them safe and compliant.

This policy setting controls whether Word, Excel, and PowerPoint users can use non-Cloud locations (local and network) to create new files. If you enable this policy setting, users will only have Cloud Locations available to perform Save As and Save new files. If you disable or don’t configure this policy setting, users can use any location (Cloud, Local, and Network) to perform Save As and Save new files. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for Enterprise.

When this will happen

  • Public Preview: We will begin rolling out late August 2025 and expect to complete by mid-September 2025.
  • General Availability (Worldwide, GCC, GCC High, and DoD): We will begin rolling out mid-September 2025 and is now expected to complete by end of December 2025 (previously late September).

How this will affect your organization

If you do nothing, this change will have no impact on your organization.

If you enable the new Policy, Office will limit the creation of new Word, Excel, or PowerPoint files to Cloud Locations; Save and Save a Copy operations will only present Cloud locations and all local destinations will disappear from Office programs.

user settings

If Known Folders have been redirected to OneDrive (KFM), these folders are considered Cloud folders and they will be available for Save and Save a Copy operations.

What you need to do to prepare

If your organization already keep all Office files in the Cloud, this policy will prevent users from accidentally saving files outside of the Cloud.

If users in your organization still use local files, this policy will promote the creation of new files in the Cloud and prevent additional files to be created locally. You can communicate this change to end users explaining the advantages of saving the files to the Cloud instead of saving to local folders:

  • Easy collaboration: It’s easy to work with others—just share your Cloud file to start collaborating right away. You and your team can add comments and make changes together, and AutoSave keeps your work updated in real time.
  • Never lose your progress: Don’t worry about losing your work—files in the Cloud include AutoSave on, meaning your documents are automatically saved for you as you work.​
  • Access from anywhere: Files you create in Word, Excel, or PowerPoint on Windows are instantly available from your Mac, web browser, iPhone, or Android device. When you make changes on one device, they are available from everywhere.

To minimize impact on users, we recommend moving (redirecting) known folders to OneDrive (Redirect and move Windows known folders to OneDrive - SharePoint in Microsoft 365)

To deploy this policy:

If you use Active Directory, Microsoft Entra or hybrid environments, you can use Group Policy Objects. Group policy can represent policy settings in the file system or in Active Directory Domain Services. When used with Active Directory, Group Policy settings are contained in a Group Policy Object (GPO). (Group Policy overview for Windows; Create and manage group policy in Microsoft Entra Domain Services - Microsoft Entra ID)

You can also use Cloud Policy Service: Cloud Policy service for Microsoft 365 lets you enforce policy settings for Microsoft 365 Apps for enterprise on a user's device, even if the device isn't domain joined or otherwise managed. When a user signs into Microsoft 365 Apps for enterprise on a device, the policy settings roam to that device. (Overview of Cloud Policy service for Microsoft 365 - Microsoft 365 Apps)

Learn More:

Compliance considerations

Question Answer and Explanation
Does the change store new customer data, if so, where, and is the data cached or permanently stored? New files created in Word, Excel, and PowerPoint will be stored in Cloud Locations (e.g., OneDrive, SharePoint, or third-party Clouds) instead of local or network drives. These files are permanently stored in the Cloud.
Does the change alter how existing customer data is processed, stored, or accessed (e.g. documents, emails, chats, etc.), if so how and to what extent? The policy restricts the ability to create and store new files locally, shifting data creation to Cloud Locations where files are subject to organizational compliance policies.
Does the change modify, interrupt, or disable any of the following capabilities (Purview)? Files saved in the Cloud are automatically subject to Microsoft Purview compliance controls, including Information Protection labels, Data Loss Prevention (DLP), and retention policies.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Review and deploy new Group Policy if desired",
      "Communicate change to users",
      "Redirect known folders to OneDrive for minimal impact"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Admins can now enforce cloud-only file creation in Word, Excel, and PowerPoint for Windows via Group Policy, restricting \u0027Save As\u0027 to OneDrive, SharePoint, or third-party clouds.",
    "ai_topics": [
      "Microsoft 365 Apps",
      "Word",
      "Excel",
      "Powerpoint",
      "OneDrive",
      "SharePoint",
      "Entra"
    ],
    "category": "stayInformed",
    "details_map": {
      "Summary": "Starting late August 2025, IT admins can restrict new Word, Excel, and PowerPoint files to be created only in Cloud Locations via a Group Policy. This enhances security and compliance by ensuring files are saved in OneDrive, SharePoint, or third-party Clouds, with rollout completing by December 2025."
    },
    "id": "MC1137593",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-12-08T17:28:50Z",
    "ms_products": [
      "Microsoft 365 Apps"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft 365 apps"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "New feature"
    ],
    "title": "(Updated) Restrict new file creation in Office desktop apps to Cloud Locations"
  }
}